Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa
File: 7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa (raw, json)
Hash identifier: I+2Fqb0lUDB3OpPMTVEGXx1x7c1oEd3XpQ9uc0AFvWc=
Subject key identifier: 08:9F:7C:94:8F:25:80:CE:94:43:CD:39:C9:5C:D4:0D:1B:CB:AE:FB
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E16BC85C426917157975CAB0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 397194
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:c8:5c:42:69:17:15:79:75:ca:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=2aa5f04a-c940-4da4-96b0-576b92e3c866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:df:4e:c1:4d:23:36:11:01:94:e6:5d:18:
c6:9a:f3:2e:72:5a:89:ca:ab:fe:f5:f7:a9:2c:4a:
27:d9:09:97:44:78:fa:e6:8d:39:00:c7:bc:a1:94:
bb:2a:a3:8f:b2:a1:63:ac:76:6a:b4:21:ba:13:cc:
69:d3:41:73:7f:c4:96:34:1f:5e:0b:4a:f8:f5:c9:
30:03:f7:4a:4a:64:7d:ab:32:56:d2:1c:4b:0e:d4:
4f:a7:46:92:4b:35:8f:de:7e:8f:34:00:91:5b:df:
19:13:23:f2:b9:6f:0d:c8:c4:3e:24:fc:06:49:be:
d5:6f:45:80:77:d9:c9:5f:3b:5e:e6:c2:62:b3:f6:
54:1e:2f:f1:f3:fc:19:f5:5d:48:e5:c8:70:5e:d0:
56:b0:56:93:1f:22:fa:05:a3:30:60:77:92:ec:59:
e6:89:5e:25:a8:44:26:42:f2:59:43:5e:ad:d0:a5:
e5:83:f5:36:14:dc:83:33:75:d7:28:17:52:9d:1e:
da:f2:90:bf:2b:31:7c:09:7f:0c:49:04:11:c5:37:
67:7b:eb:15:97:9d:3a:d4:ec:5e:c7:aa:b7:71:9f:
eb:69:1d:59:30:eb:dc:ee:09:1f:a1:81:ad:ce:d9:
4d:e3:59:44:f2:51:88:58:4b:7e:1a:e9:13:31:0b:
c1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9F:7C:94:8F:25:80:CE:94:43:CD:39:C9:5C:D4:0D:1B:CB:AE:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/7a337b93-2bde-3a00-b744-ddd192ba4d7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a7:f8:c0:f1:57:25:a5:27:78:d3:13:3c:59:73:28:14:5c:
38:a0:76:1c:02:fb:5f:91:ec:f8:df:9c:4c:be:05:9d:a7:43:
46:c7:72:4b:cc:8c:59:95:fc:44:80:6e:6d:58:d8:36:5e:25:
3d:c4:7a:a6:58:a5:09:45:f2:97:f4:06:02:01:26:35:39:3d:
c0:5b:f7:0c:2e:11:b1:bb:20:3a:06:db:ac:d6:d8:85:b8:e7:
60:41:48:1f:7b:4f:fe:32:0b:00:97:cd:b5:06:d6:81:7e:3a:
44:c3:06:92:50:49:73:d6:79:3a:32:92:a1:ae:e6:8c:02:34:
5c:f7:05:64:c9:0d:01:af:5b:38:e2:13:22:0d:47:e8:af:ed:
5e:2c:4b:9d:49:88:53:e4:12:33:06:65:e7:70:f3:6f:0d:d0:
0f:66:c1:5d:20:e9:e9:86:1b:27:d8:17:2e:36:82:07:c3:06:
cc:15:8a:f6:b2:27:f9:dc:64:8e:59:77:d1:83:a4:7a:92:9c:
2f:a9:70:85:56:db:1d:43:21:20:56:38:46:21:4e:e2:66:76:
53:ec:ab:9c:d9:5f:75:65:0b:a2:42:22:40:31:fd:9f:f1:f1:
6e:41:52:1a:03:92:3b:ab:c7:e5:02:3b:15:e8:4c:b6:a0:04:
7e:97:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:01 2025 by rpki-client